CVE-2024-48419 describes command injection vulnerabilities in Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC version 1.06. The vulnerabilities exist in the /bin/goahead binary and can be triggered through specific web interface endpoints: /goform/tracerouteDiagnosis, /goform/pingDiagnosis, and /goform/fromSysToolPingCmd. Successful exploitation allows an attacker with web interface access to execute arbitrary shell commands with root privileges, potentially compromising the device fully. The CVSS 3.1 base score is 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), reflecting network attack vector, low attack complexity, required low privileges, no user interaction, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently provided.

An attacker with access to the router's web interface can execute arbitrary commands as root, leading to full device compromise. This includes potential unauthorized control, data theft, disruption of network services, and further lateral attacks within the network. The vulnerability affects confidentiality, integrity, and availability of the device and connected network.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict access to the router's web interface to trusted users only and consider disabling remote management features if enabled. Monitor vendor channels for updates or official fixes.